Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
File:                     mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft (raw, json)
Hash identifier:          ve1BkYoRJf962ndlIkVc7rjHqEvYnxJGk1QwCaljzOY=
Subject key identifier:   C8:3C:E8:D5:D7:99:72:8B:24:6B:BB:A1:3E:B7:F9:75:99:D4:26:A9
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Certificate issuer:       /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial:       019D2628955BF5A86BF9D474B9B5ECD63FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
Manifest number:          185B
Signing time:             Wed 25 Mar 2026 18:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:26 +0000
Files and hashes:         1: mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl (hash: Ib4gtyvXWVqaPeK3hAG5cxr7+8NCX8MVNSfbhtk9K5U=)
                          2: uGHVRNRL_tLrHeYc2ab2IcKFN0o.roa (hash: Rgrpa9BFgykqaCEIzp1M6C8GB9BsKEtf6xgAPY/or1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:95:5b:f5:a8:6b:f9:d4:74:b9:b5:ec:d6:3f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944078b40772b172c7046e7446204980ceae139
        Validity
            Not Before: Mar 25 18:01:26 2026 GMT
            Not After : Mar 26 18:01:26 2026 GMT
        Subject: CN=c83ce8d5d799728b246bbba13eb7f97599d426a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:c7:d2:3c:e1:31:47:79:8a:ba:6f:9e:97:
                    e4:15:61:3e:cc:96:a1:c9:f0:79:c3:3f:19:12:48:
                    62:2a:a5:e9:b4:ea:d2:bf:02:04:c3:ed:fe:21:50:
                    46:f0:fa:bb:26:aa:c9:19:e5:a9:55:15:fe:9d:ce:
                    08:a2:ce:ca:7c:91:10:55:1f:9c:97:2c:8c:d9:d6:
                    96:a6:df:61:81:08:f4:1e:1d:0a:01:07:a2:f5:7d:
                    f8:9c:54:7c:a1:2f:00:fb:da:c3:2f:66:e1:fc:e1:
                    26:6d:1b:44:d0:9f:d8:18:64:9c:90:14:8b:68:51:
                    a8:b6:af:3c:e3:da:fa:76:95:bc:09:c1:59:68:33:
                    3b:ec:fd:b4:45:0d:5a:b6:07:8b:eb:f9:c4:c2:ab:
                    5d:3e:58:f1:b0:8e:ca:7b:0d:74:11:eb:8d:aa:42:
                    5e:64:3a:35:6c:49:ae:27:32:94:87:31:73:f5:17:
                    c3:b3:62:69:2d:84:72:d4:f8:6c:b8:1c:24:1c:8d:
                    e8:43:ce:b2:95:0b:a7:d0:44:08:d1:9d:3a:db:76:
                    1b:d0:9a:42:d7:45:13:5f:22:03:9c:73:56:50:f1:
                    14:8b:0e:9d:bb:a8:e0:0b:0f:0d:42:78:a3:3f:2c:
                    89:63:bd:af:b3:19:ea:42:2e:1e:35:9e:ed:54:25:
                    47:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3C:E8:D5:D7:99:72:8B:24:6B:BB:A1:3E:B7:F9:75:99:D4:26:A9
            X509v3 Authority Key Identifier:
                keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ed:2b:71:13:c6:06:77:95:93:a4:9c:6e:73:41:99:e2:41:
         e1:ae:42:fa:a0:d8:57:25:25:72:4d:ee:65:31:3b:46:3c:77:
         5a:6a:2f:08:fb:da:a1:dd:0b:5d:08:e1:9c:a5:03:26:00:3e:
         a7:02:7a:91:50:d5:90:38:64:1e:51:b5:6c:65:02:cb:7f:5e:
         cb:01:34:2c:23:f4:27:d3:9a:07:5a:6a:6f:02:1b:cc:97:f8:
         b2:a6:64:1e:9f:90:f7:c8:22:0a:b7:3e:d0:b7:33:ba:02:60:
         9e:31:4e:da:a9:da:f0:07:f1:41:24:ec:6d:3c:e2:25:22:20:
         35:2b:55:67:d5:ed:d5:25:d9:8f:15:59:e6:54:44:79:65:79:
         11:e4:79:1b:b9:ae:03:41:88:db:20:14:1c:04:37:06:70:c3:
         17:54:b9:30:ed:82:b2:31:ea:5e:a5:5b:54:a1:72:e6:99:15:
         b4:20:8d:fc:d0:d3:c6:9e:66:11:3e:bb:e8:42:9d:6a:7d:13:
         a6:b9:14:50:20:cb:58:99:9d:23:4e:70:61:4a:8a:3d:be:89:
         b6:b9:e3:39:03:6b:60:4d:bb:9f:08:9d:46:80:ad:10:26:77:
         34:1b:1e:3a:56:f0:54:ac:0f:b8:5f:d3:a6:86:e9:e5:09:d3:
         67:c5:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:09 2026 by rpki-client